Detection rules › By catalog entry

Microsoft-Windows-ProcessExitMonitor

Catalog entry	Rules
Event ID 3000	1

Event ID 3000

1 detection rules reference this catalog entry. View catalog entry.

Splunk (1)

Windows Event Triggered Image File Execution Options Injection T1546,T1546.012

Back to all Microsoft-Windows-ProcessExitMonitor catalog entries